Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
File:                     lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json)
Hash identifier:          M2zdhBrTsgOxpytppYwP4Q2fDjfrlRvg3XYS6kiMq6g=
Subject key identifier:   A8:91:F0:5E:06:E9:EB:94:29:69:EE:65:A1:68:91:EA:1A:5D:5A:5B
Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
Certificate issuer:       /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Certificate serial:       0190448BCBE5401CB4B5BA46AE756359012B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
Manifest number:          08F3
Signing time:             Sun 23 Jun 2024 10:02:10 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:10 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:10 +0000
Files and hashes:         1: 1-G1sxKyCjtbC2VvyuGBhZes7Qg.roa (hash: 9jZg5bMijYW9BxT5hinrF0KTK0qqqcnj9BnyPR9wjbI=)
                          2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: PcKaJGrdXIj3efhms1RYBbng+izXyNhZDdMsSomIOCM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:cb:e5:40:1c:b4:b5:ba:46:ae:75:63:59:01:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
        Validity
            Not Before: Jun 23 10:02:10 2024 GMT
            Not After : Jun 24 10:02:10 2024 GMT
        Subject: CN=a891f05e06e9eb942969ee65a16891ea1a5d5a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e0:49:e7:ed:75:aa:28:f8:88:b4:75:1a:96:
                    8b:49:20:b1:5b:48:3d:50:d2:53:b0:53:a0:56:cd:
                    4e:66:ae:8d:fa:3f:64:bb:99:bd:0a:0e:56:ed:02:
                    35:a6:51:8a:ec:03:a6:e4:5c:32:ca:5e:58:d4:63:
                    cf:08:63:31:32:24:3c:01:ba:0e:02:e8:27:83:4b:
                    8b:17:6f:ec:1c:29:26:c3:f1:0b:e3:6f:cd:54:bb:
                    04:e4:82:89:8a:9d:36:4f:11:1d:42:2c:56:bd:5a:
                    ff:d0:d7:cf:3b:35:4a:ba:b0:3e:92:ad:53:e5:f0:
                    6d:82:51:99:b6:64:6c:7c:51:31:49:8c:3d:b9:a5:
                    02:f5:2a:93:20:02:bf:c8:81:b9:1d:b9:0e:5f:e2:
                    ea:54:77:09:f7:f0:85:93:de:98:79:35:2a:ec:d3:
                    39:8b:ad:e9:d7:59:06:33:c2:df:16:d0:0a:78:9e:
                    fd:60:5e:99:89:e5:69:70:d5:d7:4e:db:1b:c6:f4:
                    29:12:c7:a6:82:dd:e8:59:9d:89:4a:ba:22:09:1a:
                    5d:3f:e5:08:3d:de:41:21:0d:16:b5:46:19:44:16:
                    42:b2:f7:4f:0f:86:c1:a2:cf:41:da:ce:b8:99:d5:
                    62:d7:15:fc:6a:f9:3e:d4:66:53:88:ec:fb:0a:af:
                    db:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:91:F0:5E:06:E9:EB:94:29:69:EE:65:A1:68:91:EA:1A:5D:5A:5B
            X509v3 Authority Key Identifier:
                keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c4:21:7b:01:38:d2:a1:bf:78:dc:58:cd:c9:a9:2c:fa:a5:
         17:f8:ad:06:4b:7a:b9:83:19:b0:ae:b7:56:ca:0c:e5:f0:b2:
         58:4d:c5:a8:2d:b5:aa:c5:7a:1b:a6:ca:cd:e4:4b:f3:31:7f:
         76:e5:67:fc:68:b0:a1:54:5d:bf:c5:5a:e3:04:ee:19:dc:20:
         a2:17:76:6c:41:d2:e1:ed:83:4c:8a:3a:da:28:bb:6d:fd:84:
         05:75:21:89:a9:39:1d:03:67:23:b0:c9:8f:a9:b7:3d:b7:34:
         18:db:27:ae:ad:13:96:32:16:68:43:65:fd:c2:6b:98:9f:25:
         b8:35:56:15:92:ab:fa:cf:83:af:f4:c3:f9:ab:c7:8b:ce:bd:
         2a:2f:d5:a7:1a:b2:59:6f:a0:fe:7d:b9:f4:52:5f:a4:89:0b:
         c3:30:cd:98:46:59:db:26:95:25:b4:86:25:87:2b:b9:a2:ee:
         70:ce:e8:7a:0e:ce:04:40:e5:52:e0:74:c3:24:63:ce:c1:81:
         99:69:45:a8:de:53:6e:40:08:ab:f4:b2:96:32:22:02:63:c3:
         57:be:2d:c6:1c:c3:f1:5f:6b:2b:7f:06:54:22:bd:4c:55:f7:
         fe:46:93:0e:07:65:eb:ed:36:b9:a8:b1:c3:88:47:17:5b:40:
         06:8a:55:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:04:00 2024 by rpki-client on console-fra.rpki-client.org